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REMARKS 

Claims 1-12 are pending in the Application. Claims 1-12 are provisionally 
rejected on the ground of non-statutory obviousness-type double patenting. Claims 1- 
3, 5-7 and 9-1 1 are rejected under 35 U.S.C. §102(e). Claims 4, 8 and 12 are rejected 
under 35 U.S.C. § 103(a). Applicants respectfully traverse these rejections for at least 
the reasons stated below and respectfully request that the Examiner reconsider and 
withdraw these rejections. 

I. PROVISIONAL REJECTION UNDER OBVIOUSNESS-TYPE DOUBLE 
PATENTING: 

The Examiner has provisionally rejected claims 1-12 under the judicially 
created doctrine of obviousness-type double patenting in view of co-pending 
Application No. 10/749,584 and in view of co-pending Application No. 10/994,620. 

Since none of these Applications at issue have been allowed. Applicants defer 
responding to this rejection. 

Applicants note that if the "provisional" double patenting rejection is the only 
rejection remaining in an apphcation (either the present appUcation or in Application 
No. 10/749,584 or in Application No. 10/994,620), then the Examiner should 
withdraw the rejection and permit that apphcation to issue as a patent. M.P.E.P. 
§804. The "provisional" double patenting rejection may then be converted into a 
double patenting rejection in the other appUcation at the time the one application 
issues as a patent. M.P.E.P. §804. 

n. REJECTIONS UNDER 35 U.S.C. § 102(e): 

The Examiner has rejected claims 1-3, 5-7 and 9-11 under 35 U.S.C. §102(e) 
as being anticipated Thompson et al. (U.S. Patent No. 6,725,382) (hereinafter 
"Thompson"). Applicants respectfully traverse these rejections for at least the 
reasons stated below and respectfully request the Examiner to reconsider and 
withdraw these rejections. 

For a claim to be anticipated under 35 U.S.C. §102, each and every claim 
limitation must be foimd within the cited prior art reference and arranged as required 
by the claim. M.P.E.P. §2131. 
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Applicants respectfully assert that Thompson does not disclose "providing 
protected storage accessible by Basic Input Output System (BIOS) code" as recited in 
claims 1, 5 and 9. The Examiner cites column 3, lines 10-26 and 47-57 as well as 
Figure 3 of Thompson as disclosing the above-cited claim limitation. Office Action 
(2/21/2007), page 10. Applicants respectfully traverse and assert that Thompson 
instead discloses a personal computer 100 that has a storage element like BIOS 
device 108: one whose contents cannot be easily accessed or bypassed by a user of 
the device while operation of the device is disabled, and whose operability hinges on 
those contents. Column 3, Imes 21-26. Thompson further discloses that the BIOS 
device contains a security program 302 including an encryption key 304 and 
password 306 entries. Column 3, lines 5 1-53. Hence, Thompson discloses a personal 
computer that includes a BIOS device that contains a security program. The BIOS 
device (element 108) of Thompson is not a protected storage accessible by BIOS 
code. There is no language in the cited passages that discloses that the BIOS device 
(element 108) of Thompson is accessible by the BIOS code. Thus, Thompson does 
not disclose all of the limitations of claims 1, 5 and 9, and thus Thompson does not 
anticipate claims 1, 5 and 9. M.P.E.P. §2131. 

In response to Applicants' above argument, the Examiner cites colunm 3, lines 
48-65 of Thompson as disclosing the above-cited claim limitation. Office Action 
(2/21/2007), page 3. Applicants respectfully traverse. Thompson instead discloses 
that in addition to containing the conventional BIOS program 300, device 108 also 
contains a security program 302 including encryption key 304 and password 306 
entries. Column 3, lines 50-53. Thompson further discloses that the basic concept of 
the security mechanism is to have a unique password 306 stored in BIOS device 108 
and require that password 306 be entered and matched form the keyboard or other 10 
device at the very beginning of each boot cycle to allow the boot cycle and 
subsequent PC 100 operation to continue. Column 3, lines 58-63. Hence, Thompson 
discloses that BIOS device 108 includes a password that must match the password 
entered by the user at the very beginning of each boot cycle in order to the boot cycle 
to continue. 

There is no language in the cited passage that discloses that the BIOS device 
(element 108) of Thompson is a protected storage accessible by the BIOS code. 
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Instead, BIOS device 108 (Examiner asserts that BIOS device 108 discloses the 
protected storage) includes the BIOS program 300 as illustrated in Figure 3. The 
BIOS program 300 does not access the device (BOIS device 108) containing itself. 
Thus, Thompson does not disclose all of the limitations of claims 1 , 5 and 9, and thus 
Thompson does not anticipate claims 1, 5 and 9. M.P.E.P. §2131. 

Applicants further assert that Thompson does not disclose "encrypting 
normally unaccessible (NA) data with said symmetrical encryption key" as recited in 
claim 1 and similarly in claims 5 and 9. The Examiner cites column 3, lines 47-57 
and item 306 of Figure 3 of Thompson as disclosing the above-cited claim limitation. 
Office Action (2/21/2007), page 10. Applicants respectfully traverse and assert that 
Thompson instead discloses that the BIOS device 108 contains a security program 
302 including an encryption key 304 and password 306 entries. Column 3, lines 51- 
53. There is no language in the cited passage that discloses that the password 306 
(Examiner asserts that password 306 discloses the claimed NA data) is encrypted 
using the encryption key 304 (Examiner asserts that the encryption key 304 discloses 
the claimed synunetrical encryption key). Hence, Thompson does not disclose 
encrypting NA data with a symmetrical encryption key. Thus, Thompson does not 
disclose all of the limitations of claims 1, 5 and 9, and thus Thompson does not 
anticipate claims 1, 5 and 9. M.P.E.P. §2131. 

In response to Applicants' above argument, the Examiner further cites colunm 
7, lines 25-28 of Thompson as disclosing the above-cited claim limitation. Office 
Action (2/21/2007), page 3. Applicants respectfully traverse. Thompson instead 
discloses that CPU 102 retrieves from security card 250 the contents of memory 254, 
at step 604, and compares these contents against password 306 to determine if they 
match, at step 606. Column 7, lines 13-16. Thompson further discloses that if they 
do not match, CPU 102 prompts the user to connect the correct security card 250 to 
PC 100, at step 606, or CPU 102 prompts for and receives from the user a new 
password, at step 610. Column 7, lines 16-23. Thompson additionally discloses that 
CPU 102 then encrypts the new password by using encryption key 304, at step 612. 
Column 7, lines 23-24. Thompson further discloses that using public key encryption 
is not necessary, since there is no remote agency hke TCA 150 involved. Colunm 7, 
lines 24-25. Furthermore, Thompson discloses that optionally, a common key can be 



4 



RPS920010045US1 



PATENT 



used in all PCs 100, as is common in most UNIX operating system environments. 
Column 7, lines 25-27. Hence, Thompson discloses encrypting a password provided 
by the user via security card 250 using encryption key 304. Furtha, Thompson 
discloses that a common key can be used in all PCs. 

There is no language in the cited passage that discloses encrypting password 
306 (Examiner asserts that password 306 discloses the claimed NA data) using the 
encryption key 304 (Examiner asserts that the encryption key 304 discloses the 
claimed symmetrical encryption key). Instead, Thompson discloses that a password 
provided by the user via security card 250 is encrypted using encryption key 304. 

Neither is there any language in the cited passage that discloses encrypting 
password 306 (Examiner asserts that password 306 discloses the claimed NA data) 
using the encryption key 304 (Examiner asserts that the encryption key 304 discloses 
the claimed symmetrical encryption key) where the encryption key 304 is a 
sy mm etrical encryption key. Instead, Thompson discloses that a common key can be 
used in all PCs. The Examiner must provide a basis in fact and/or technical reasoning 
to support the assertion that Thompson's teaching of a common key that can be used 
in all PCs is the same as encrypting password 306 (Examiner asserts that password 
306 discloses the claimed NA data) using the encryption key 304 (Examiner asserts 
that the encryption key 304 discloses the claimed symmetrical encryption key) where 
the encryption key 304 is a symmetrical encryption key. Ex parte Levy, 
17 U.S.P.Q.2d 1461, 1464 (Bd. Pat. App. & Inter. 1990). That is, the Examiner must 
provide extrinsic evidence that must make clear that Thompson's teaching of a 
common key that can be used in all PCs is the same as encrypting password 306 
(Examiner asserts that password 306 discloses the claimed NA data) using the 
encryption key 304 (Examiner asserts that the encryption key 304 discloses the 
claimed symmetrical encryption key) where the encryption key 304 is a symmetrical 
encryption key, and that it would be so recognized by persons of ordinary skill. In re 
Robertson, 169 F.3d 743, 745 (Fed. Cir. 1999). Since the Examiner has not provided 
any such objective evidence, the Examiner has not presented a prima facie case of 
anticipation in rejecting claims 1, 5 and 9. M.P.E.P. §2131. 
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Applicants further assert that Thompson does not disclose "storing said 
encrypted NA data and accessible non-encrypted (ANE) data in an unprotected 
lockable persistent storage with existing write protect algorithms" as recited in claim 
1 and similarly in claims 5 and 9. The Examiner cites BIOS device 108 of Thompson 
as disclosing "a protected storage," which is recited in a previous limitation of claims 
1, 5 and 9. Office Action (2/21/2007), pages 3 and 10. The Examiner further cites 
column 3, line 27 - column 4, line 5 of Thompson as disclosing the above-cited claim 
limitation. Office Action (2/21/2007), page 10. Further, the Examiner asserts that 
encrj^ted password 306 of Thompson teaches encrypted NA data. Office Action 
(2/21/2007), pages 3 and 10. Additionally, the Examiner asserts that BIOS code 300 
of Thompson teaches accessible non-encrypted (ANE) data. Id. The Examiner 
further asserts that write protected algorithms are inherently required in order for the 
data stored in the unprotected lockable persistent storage to be erased. Office Action 
(2/21/2007), page 10. Applicants respectfixlly traverse. 

Thompson instead discloses that BIOS device 108 comprises non-volatile, 
"permanent", memory, one whose contents are preserved even when power is absent. 
Column 3, lines 28-30. Thompson further discloses that unlike ROM 104, however, 
it is electrically alterable and programmable under control of special software, in 
order to update BIOS over the life of PC 100. Column 3, lines 30-32. Additionally, 
Thompson discloses that storage devices of this type are known as programmable 
read-only memory (PROM), electrically-erasable PROM (EEPROM), or flash 
memory. Column 3, lines 33-35. Hence, Thompson discloses that BIOS device 108 
(Examiner has previously asserted that BIOS device 108 disclosed the claimed 
protected storage) may be a storage device that is programmable read-only memory 
(PROM), electrically-erasable PROM (EEPROM), or flash memory. The Examiner 
cannot cite the same element (BIOS device 108) as disclosing both a protected 
storage and an unprotected lockable persistent storage . These claim elements are 
separate elements and the Examiner must cite to separate elements in Thompson as 
allegedly disclosing these elements . Thus, Thompson does not disclose all of the 
limitations of claims 1, 5 and 9, and thus Thompson does not anticipate claims 1, 5 
and 9. M.P.E.P. §2131. 
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Further, there is no language in the cited passage that discloses storing the 
encrypted NA data and accessible non-encrypted (ANE) data in an unprotected 
lockable persistent storage with existing write protect algorithms . Thus, Thompson 
does not disclose all of the limitations of claims 1, 5 and 9, and thus Thompson does 
not anticipate claims 1, 5 and 9. M.P.E.P. §2131. 

Applicants respectfully traverse the assertion that write protect algorithms are 
inherently disclosed in Thompson. The Examiner has not pointed to any language in 
Thompson that BIOS device 108 is an unprotected lockable persistent storage that 
needs a write protected algorithm to erase the stored data. The Examiner must 
provide a basis in fact and/or technical reasoning to support the assertion that 
Thompson inherently discloses write protect algorithms. Ex parte Levy, 
17 U.S.P.Q.2d 1461, 1464 (Bd. Pat. App. & Inter. 1990). That is, the Examiner must 
provide extrinsic evidence that must make clear that Thompson inherently discloses 
write protect algorithms, and that it would be so recognized by persons of ordinary 
skill. In re Robertson, 169 F.3d 743, 745 (Fed. Cir. 1999). Since the Examiner has 
not provided any such objective evidence, the Examiner has not presented a prima 
facie case of anticipation in rejecting claims 1, 5 and 9. M.P.E.P. §2131. 

Claims 2-3 each recite combinations of features of independent claim 1 and 
hence are not anticipated by Thompson for at least the reasons that claim 1 is not 
anticipated by Thompson. Claims 6-7 each recite combinations of features of 
independent claim 5 and hence are not anticipated by Thompson for at least the 
reasons that claim 5 is not anticipated by Thompson. Claims 10-11 each recite 
combinations of features of independent claim 9 and hence are not anticipated by 
Thompson for at least the reasons that claim 9 is not anticipated by Thompson. 

Claims 2-3, 6-7 and 10-11 recite additional features, which, in combination 
with the features of the claims upon which they depend, are not anticipated by 
Thompson. 

For example, Thompson does not disclose "altering said ANE data by issuing 
an existing write request to said BIOS from said write protect algorithms for said 
unprotected lockable persistent storage; and updating said ANE data in said 
unprotected lockable persistent storage" as recited in claim 2 and similarly in claims 6 
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and 10. The Examiner cites column 3, lines 27-46 and column 7, lines 26-44 of 
Thompson as disclosing the above-cited claim limitation. Office Action (2/21/2007), 
page 10. Applicants respectfully traverse. 

Thompson instead discloses that BIOS device 108 comprises non- volatile, 
permanent, memory, one whose contents are preserved even when power is absent. 
Column 3, lines 38-30. Thompson fiirther discloses that CPU 102 stores the new 
encrypted password as password 306 in BIOS device 108. Column 7, lines 30-31. 
Thompson additionally discloses that CPU 102 also stores it in memory 254 of 
security card 250 in place of any previously stored contents therein. Column 7, lines 
31-33. Thompson fiirther discloses that security card 250 may need to supply the 
entire BIOS service 108 contents along with the new password 308. Column 7, lines 
34-36. 

Hence, Thompson discloses storing an encrypted password in both the BIOS 
device and in the memory 254 of security card 250. This is not the same as altering 
or updating accessible non-encrypted (ANE) data. Further, there is no language in 
the cited passage that discloses altering ANE data . Neither is there any language in 
the cited passage that discloses altering ANE data by issuing an existing write request 
to the BIOS. Neither is there any language in the cited passage that discloses altering 
ANE data by issuing an existing write request to the BIOS from the write protect 
algorithms for the unprotected lockable persistent storage. Neither is there any 
language in the cited passage that discloses updating the ANE data in the unprotected 
lockable persistent storage. Thus, Thompson does not disclose all of the limitations 
of claims 2, 6 and 10, and thus Thompson does not anticipate claims 2, 6 and 10. 
M.P.E.P. §2131. 

In response to Applicants' above argument, the Examiner asserts that BIOS 
code 300 of Thompson teaches accessible non-encrypted (ANE) data. Office Action 
(2/21/2007), page 3. Further, the Examiner focuses on the language of column 3, 
lines 27-31 of Thompson as disclosing the above-cited claim limitation. Office 
Action (2/21/2007), page 4. Applicants respectfully traverse. 

The Examiner appears to be citing BIOS code 300 of Thompson as disclosing 
both the ANE data and the BIOS code as recited in claim 2 and similarly in claims 6 
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and 10. The Examiner cannot cite the same element as disclosing both ANE data 
and BIOS code . These claim elements are separate elements and the Examiner must 
cite to separate elements in Thompson as allegedly disclosing these elements . Thus, 
Thompson does not disclose all of the limitations of claims 2, 6 and 10, and thus 
Thompson does not anticipate claims 2, 6 and 10. M.P.E.P. §2131. 

Further, Thompson instead discloses that the BIOS device 108 comprises non- 
volatile, "permanent," memory, one whose contents are preserved even when power 
is absent. Column 3, lines 27-29. Thompson further discloses that unlike ROM 104, 
however, it is electrically alterable and programmable under control of special 
software, in order to update BIOS over the Ufe of PC 100. Column 3, lines 29-31. 
Hence, Thompson discloses updating the BIOS. 

There is no language in the cited passage that discloses altering the ANE data 
by issuing an existing write request to the BIOS. Neither is there any language in the 
cited passage that discloses altering the ANE data by issuing an existing write request 
to the BIOS from the write protect algorithms. Neither is there any language in the 
cited passage that discloses altering the ANE data by issuing an existing write request 
to the BIOS from the write protect algorithms for the unprotected lockable persistent 
storage. Neither is there any language in the cited passage that discloses updating the 
ANE data in the unprotected lockable persistent storage. Thus, Thompson does not 
disclose all of the limitations of claims 2, 6 and 10, and thus Thompson does not 
anticipate claims 2, 6 and 10. M.P.E.P. §2131. 

Applicants further assert that Thompson does not disclose "accessing said NA 
data via a change request issued to said BIOS over a secure communication link; 
validating said change request" as recited in claim 3 and similarly in claims 7 and 1 1. 
The Examiner cites column 5, line 45 - column 6, line 67 and item 130 of Figure 1 of 
Thompson as disclosing the above-cited claim limitations. Office Action 
(2/21/2007), page 11. Applicants respectfully traverse and assert that Thompson 
instead discloses that if the user elects to change the password or elects to establish a 
password, then CPU 102 proceeds to interact with either TCA 150 or security card 
250. Column 5, lines 46-50. Thompson further discloses that item 130 of Figure 1 
corresponds to a data network 130. Column 5, Unes 51-52. There is no language in 
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the cited passage that discloses accessing NA data via a change request issued to the 
BIOS . Neither is there any language in the cited passage that discloses accessing NA 
data via a change request issued to the BIOS over a secure communication link . 
Neither is there any language in the cited passage that discloses validating the change 
request. Thus, Thompson does not disclose all of the limitations of claims 3, 7 and 
1 1 , and thus Thompson does not anticipate claims 3, 7 and 1 1 . M.P.E.P. §2131. 

In response to Applicants' above argimient, the Examiner cites column 6, lines 
21-52 of Thompson as disclosing the above-cited claim limitation. Office Action 
(2/21/2007), page 4. AppHcants respectfully traverse. Thompson instead discloses 
that under the control of the conventional special software for programming BIOS 
device 108, CPU 102 then stores the new encrypted password in password 306 of 
BIOS, at step 444, overwriting any previous value of password 306 in the process. 
Column 6, lines 32-37. Hence, Thompson discloses overwriting the value of 
password 306. 

As understood by Applicants, the Examiner had previously cited password 
306 as disclosing NA data. Office Action (2/21/2007), pages 3 and 10. There is no 
language in the cited passage that discloses accessing password 306 via a change 
request issued to the BIOS . Neither is there any language that discloses validating the 
change request . 

Furthermore, regarding claims 3, 7 and 11, Applicants respectfully assert that 
Thompson does not disclose "retrieving said symmetrica] encryption key by said 
BIOS in response to said validated change request; using said symmetrical encryption 
key to decrypt and alter said NA data; encrypting said altered NA data using said 
symmetrical encryption key; and storing said altered encrypted NA data in said 
unprotected lockable persistent storage." The Exammer cites column 3, lines 27-46 
and column 7, lines 25-44 of Thompson as disclosing the above-cited claim 
limitations. Office Action (2/21/2007), page 11. Applicants respectfully traverse. 

Thompson instead discloses that BIOS device 108 comprises non-volatile, 
permanent, memory, one whose contents are preserved even when power is absent. 
Column 3, lines 38-30. Thompson further discloses that CPU 102 stores the new 
encrypted password as password 306 in BIOS device 108. Colunm 7, lines 30-31. 
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Thompson additionally discloses that CPU 102 also stores it in memory 254 of 
security card 250 in place of any previously stored contents therein. Column 7, lines 
31-33. Thompson further discloses that security card 250 may need to supply the 
entire BIOS service 108 contents along with the new password 308. Column 7, lines 
34-36. Hence, Thompson discloses storing an encrypted password in both the BIOS 
device and in the memory 254 of security card 250. 

There is no language in the cited passages that discloses retrieving the 
symmetrical encryption key by the BIOS in response to a validated change request . 
Neither is there any language in the cited passages that discloses using a symmetrical 
encryption key to decrypt and alter the NA data . Neither is titiere any language in the 
cited passages that discloses encrypting the altered NA data using the symmetrical 
encryption key . Neither is there any language in the cited passages that discloses 
storing the altered encrypted NA data in the unprotected lockable persistent storage . 
Thus, Thompson does not disclose all of the limitations of claims 3, 7 and 11, and 
thus Thompson does not anticipate claims 3, 7 and 11. M.P.E.P. §2131. 

As a resxxlt of the foregoing, Applicants respectfully assert that not each and 
every claim limitation was found within Thompson, and thus claims 1-3, 5-7 and 9-11 
are not anticipated by Thompson. M.P.E.P. §2131. 

HI. REJECTIONS UNDER 35 U.S.C. m3(a): 

The Examiner has rejected claims 4, 8 and 12 under 35 U.S.C. § 103(a) as 
being unpatentable over Thompson in view of Mirov et al. (U.S. Patent No. 
6,138,236) (hereinafter "Mirov"). Applicants respectfully traverse these rejections for 
at least the reasons stated below and respectfully request the Exammer to reconsider 
and withdraw these rejections. 

A. Thompson and Mirov. taken singly or in combination, do not teach or 
suggest the following claim limitations. 

Applicants respectfully assert that Thompson and Mirov, taken singly or in 
combination, do not teach or suggest "hashing said ANE data and encrypting said 
hash with said symmetrical encryption key; storing said encrypted hash with said 
ANE data; computing a hash of configuration data in said ANE data on a boot-up 
request; decrypting said stored encrypted hash of said configuration data; comparing 
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said decrypted hash of said stored configuration data to said computed hash of said 
configuration data from said ANE data; booting normally in response to a compare of 
said decrypted hash and said computed hash; and issuing tamper notification and 
initiating recovery processes on a non-compare of said decrypted hash and said 
computed hash" as recited in claim 4 and similarly in claims 8 and 12. The Examiner 
cites colimm 2, lines 21-32 and column 3, line 55 - column 5, line 50 of Mirov as 
teaching the above-cited claim limitation. Office Action (2/21/2007), page 12. 
Applicants respectfiiUy traverse. 

Mirov instead teaches a computer system where a portion of code/data stored 
in a non-volatile memory device can be dynamically modified or updated without 
removing any covers or parts from the computer system. Column 2, lines 17-20. 
Mirov further teaches that the computer system of the preferred embodiment includes 
a flash memory component coupled to the bus for storing non-volatile code and data. 
Column 2, lines 33-34. Mirov fijrther teaches that using the present iavention, the 
contents of the flash memory may be replaced, modified, updated or reprogrammed 
without the need for removing and/or replacing any computer system hardware 
components. Column 2, lines 36-40. 

There is no language in the cited passages that teaches hashing ANE data. 
Neither is there any language in the cited passages that teaches hashing ANE data and 
encrypting the hash with a symmetrical encryption key. Neither is there any language 
in the cited passages that teaches storing an encrj^ted hash. Neither is there any 
language in the cited passages that teaches storing an encrypted hash with the ANE 
data. Neither is there any language in the cited passages that teaches computing a 
hash of configuration data. Neither is there any language in the cited passages that 
teaches computing a hash of configuration data in the ANE data. Neither is there any 
language in the cited passages that teaches computing a hash of configuration data in 
the ANE data on a boot-up request. Neither is there any language in the cited 
passages that teaches decrypting the stored encrypted hash of the configuration data. 
Neither is there any language in the cited passages that teaches comparing the 
decrypted hash of the stored configuration data to the computed hash of the 
configuration data fi-om the ANE data. Neither is there any language in the cited 
passages that teaches booting normally in response to a compare of the decrypted 
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hash and the computed hash. Neither is there any language in the cited passages that 
teaches issuing tamper notification. Neither is there any language in the cited 
passages that teaches issuing tamper notification and initiating recovery processes. 
Neither is there any language in the cited passages that teaches issuing tamper 
notification and initiating recovery processes on a non-compare of the decrypted hash 
and the computed hash. Therefore, the Examiner has not presented a prima facie case 
of obviousness in rejecting claims 4, 8 and 12, since the Examiner is relying upon 
incorrect, factual predicates in support of the rejections. In re Rouffet, 47 U.S.P.Q.2d 
1453, 1455 (Fed. Cir. 1998). 

In response to Applicants' above argument, the Examiner appears to focus on 
column 4, line 56 - column 5, line 14 of Mirov within the previously cited passages 
as allegedly teaching the above-cited claim limitations. Office Action (2/21/2007), 
page 6. Applicants respectfully traverse. 

Mirov instead teaches that Figure 3 shows a flow diagram for generating a 
digital signature 57 for the micro-code 58. Column 4, Imes 56-57. Mirov further 
teaches that the diagram begins with generation of the verification hash from the 
micro-code 58 in step 62. Column 4, lines 57-59. Additionally, Mirov teaches that 
next, the private key is obtained for the generation of a verification hash from the 
micro-code 58 in step 64. Column 4, lines 59-60. Furthermore, Mirov teaches that m 
step 66, the verification hash is encrypted using public key cryptography techniques 
and the private key to obtain the digital signature 57. Column 4, lines 61-63. Further, 
Mirov teaches that finally, in step 68, the digital signature 57 is programmed with the 
micro-code 58 to the programmable section 55 of the flash PROM 18. Column 4, 
lines 63-65. 

There is no language in the cited passage that teaches hashing ANE data. The 
Examiner must provide a basis in fact and/or technical reasoning to support the 
assertion that micro-code 58 of Mirov corresponds to normally imaccessible data. 
See Ex parte Levy, 17U.S.P.Q.2d 1461, 1464 (Bd. Pat. App. & hiter. 1990). 

Neither is there any language in the cited passage that teaches hashing ANE 
data and encrypting the hash with a symmetrical encryption key. Instead, as 
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discussed above, Mirov teaches using public/private key cryptography. Column 4, 
lines 59-63. 

Neither is there any language in the cited passage that teaches storing an 
encrypted hash. Neither is there any language in the cited passage that teaches 
storing an encrypted hash with the ANE data. Neither is there any language in the 
cited passage that teaches computing a hash of configuration data. Neither is there 
any language in the cited passage that teaches computing a hash of configuration data 
in the ANE data. Neither is there any language in the cited passage that teaches 
computing a hash of configuration data in the ANE data on a boot-up request. 
Neither is there any language in the cited passage that teaches decrypting the stored 
encrypted hash of the configuration data. Neither is there any language in the cited 
passage that teaches comparing the decrypted hash of the stored configuration data to 
the computed hash of tbie configuration data from the ANE data. Neither is there any 
language in the cited passage that teaches booting normally in response to a compare 
of the decrypted hash and the computed hash. Neither is there any language in the 
cited passage that teaches issuing tamper notification. Neither is there any language 
in the cited passage that teaches issuing tamper notification and initiating recovery 
processes. Neither is there any language in the cited passage that teaches issuing 
tamper notification and initiating recovery processes on a non-compare of the 
decrypted hash and the computed hash. Therefore, the Examiner has not presented a 
prima facie case of obviousness in rejecting claims 4, 8 and 12, since the Examiner is 
relying upon incorrect, factual predicates in support of the rejections. In re Rouffet, 
47 U.S.P.Q.ld 1453, 1455 (Fed. Cir. 1998). 

B. Examiner's motivation for modifying Thompson with Mirov to 
incorporate the missing claim limitations of claims 4, 8 and 12 is 
insufficient. 

Most if not all inventions arise from a combination of old elements. See In re 
Rouffet, 47 U.S.P.Q.2d 1453, 1457 (Fed. Cir. 1998). Obviousness is determined from 
the vantage point of a hypothetical person having ordinary skill in the art to which the 
patent pertains. /« re 47 U.S.P.Q.2d 1453, 1457 (Fed. Cir. 1998). Therefore, 

an Examiner may often find every element of a claimed invention in the prior art. Id. 
However, identification in the prior art of each individual part claimed is insufficient 
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to defeat patentability of the whole claimed invention. See Id. In order to establish a 
prima facie case of obviousness, the Examiner must show reasons that the skilled 
artisaa, confronted with the same problems as the inventor and with no knowledge of 
the claimed invention, would select the elements from the cited prior art references 
for combination in the manner claimed. In re Rouffet, 47 U.S.P.Q.2d 1453, 1458 
(Fed. Cir. 1998). That is, the Examiner must provide some suggestion or motivation, 
either in the references themselves, the knowledge of one of ordinary skill in the art, 
or, in some case, the nature of the problem to be solved, to modify the reference or to 
combine reference teachings. See In re Dembiczak, 175 F.3d 994, 999, 50 
U.S.P.Q.2d 1614, 1617 (Fed. Cir. 1999). Whether the Examiner relies on an express 
or an implicit showing, the Examiner must provide particular findings related thereto. 
In reKotzab, 55 U.S.P.Q.2d 1313, 1317 (Fed. Cir. 2000). 

The Examiner admits that Thompson does not teach the limitations of claims 
4, 8 and 12. Office Action (2/21/2007), page 12. The Examiner asserts that Mirov 
teaches the limitations of claims 4, 8 and 12. Id. The Examiner modifies Thompson 
with Mirov to include the limitations of claims 4, 8 and 12 vd. order "to authenticate 
plurality of micro-code to authorize execution of micro-code to ensure the integrity of 
the stored data or the programmable micro-code (BIOS code) or affords ease in 
updating the flash PROM with new micro-code without compromising security 
(Mirov col. 5, lines 15-19)." Id. The Examiner's motivation is insufficient to 
establish a prima facie case of obviousness in rejecting claims 4, 8 and 12. 

The Examiner's motivation ("to authenticate plurality of micro-code to 
authorize execution of micro-code to ensure the integrity of the stored data or the 
programmable micro-code (BIOS code) or affords ease in updating the flash PROM 
with new micro-code without compromising security") does not provide reasons, as 
discussed further below, that the skilled artisan, confronted with the same problems as 
the inventor and witii no knowledge of the claimed invention, would modify 
Thompson to include the missing claim limitations of claims 4, 8 and 12. 
Accordingly, the Examiner has not presented a prima facie case of obviousness for 
rejecting claims 4, 8 and 12. In re Rouffet, 47 U.S.P.Q.2d 1453, 1458 (Fed. Cir. 
1998). 
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As stated above, the Examiner cites column 5, lines 15-19 of Mirov as support 
for the Examiner's motivation. Mirov teaches that a flash PROM 18 having an 
authentication section 45 and a programmable section 55 affords ease in updating the 
flash PROM 18 with new micro-code without compromising security. Column 5, 
lines 15-19. There is no language in column 5, lines 15-19 of Mirov that supports the 
following portion of the Examiner's motivation: "to authenticate plurality of micro- 
code to authorize execution of micro-code to ensure the integrity of the stored data or 
the programmable micro-code (BIOS code)." Neither is there any language in Mirov 
(and in particular coluirm 5, lines 15-19) that makes any suggestion that by: hashing 
the ANE data and encrypting the hash with the symmetrical encryption key; storing 
the encrypted hash with the ANE data; computing a hash of configuration data in the 
ANE data on a boot-up request; decrypting the stored encrypted hash of the 
configuration data; comparing the decrypted hash of the stored configuration data to 
the computed hash of the configuration data fi-om the ANE data; booting normally in 
response to a compare of the decrypted hash and the computed hash; and issuing 
tamper notification and initiating recovery processes on a non-compare of the 
decrypted hash and the computed hash (missing claim limitations) that this affords 
ease in updating the flash PROM 18 with new micro-code without compromising 
security. The Examiner has simply cited to an arbitrary passage in Mirov that 
mentions some benefit (ease in updating flash PROM) caused by the invention of 
Mirov (flash PROM has an authentication section and a programmable section) and 
then concludes that the Examiner has provided appropriate motivation. The 
Examiner has to provide some rationale coimection between the cited passage that is 
the source of the motivation and the missing claim limitations . The Examiner's 
source of motivation (column 5, lines 15-19 of Mirov) does not provide reasons as to 
why one skilled in the art would modify Thompson to include the missing claim 
limitations of claims 4, 8 and 12. Accordingly, the Examiner has not presented a 
prima facie case of obviousness for rejecting claims 4, 8 and 12. In re Rouffet, 47 
U.S.P.Q.2d 1453, 1458 (Fed. Cir. 1998). 

Fmther, Thompson addresses the problem of providing a security mechanism 
in a portable computer for thwarting theft or unauthorized access while making it 
easy to deal with lost passwords and validation of the device by some authority. 
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Column 1, lines 25-48. The Examiner has not provided any reasons as to why one 
skilled in the art would modify Thompson (which teaches providing a security 
mechanism in a portable computer for thwarting theft or unauthorized access while 
making it easy to deal with lost passwords and validation of the device by some 
authority) to: (1) hash ANE data and encrypt the hash with an symmetrical encryption 
key; (2) store the encrypted hash with the ANE data; (3) compute a hash of 
configuration data in the ANE data on a boot-up request; (4) decrypt the stored 
encrypted hash of the configuration data; (5) compare the decrypted hash of the 
stored configuration data to the computed hash of the configuration data from the 
ANE data; (6) boot normally in response to a compare of the decrypted hash and the 
computed hash; and (7) issue tamper notification and initiate recovery processes on a 
non-compare of the decrypted hash and the computed hash (missing claim limitations 
of Thompson). The Examiner's motivation ("to authenticate plurality of micro-code 
to authorize execution of micro-code to ensure the integrity of the stored data or the 
programmable micro-code (BIOS code) or affords ease in updating the flash PROM 
with new micro-code without compromising security") does not provide such 
reasoning. 

Why would the reason to modify Thompson (whose purpose is to provide a 
security mechanism in a portable computer for thwarting theft or unauthorized access 
while making it easy to deal with lost passwords and validation of the device by some 
authority) to: (1) hash ANE data and encrypt the hash with an symmetrical encryption 
key; (2) store the encrypted hash with the ANE data; (3) compute a hash of 
configuration data in the ANE data on a boot-up request; (4) decrypt the stored 
encrypted hash of the configuration data; (5) compare the decrypted hash of the 
stored configuration data to the computed hash of the configuration data from the 
ANE data; (6) boot normally in response to a compare of the decrypted hash and the 
computed hash; and (7) issue tamper notification and initiate recovery processes on a 
non-compare of the decrypted hash and the computed hash (missing claim limitations 
of Thompson) be to authenticate a plurality of micro-code to authorize execution of 
micro-code to ensure the integrity of the stored data or the programmable micro-code 
(BIOS code)? Thompson is not concerned with authenticating a plurality of micro- 
code to authorize execution of micro-code to ensure the integrity of the stored data or 
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the programmable micro-code (BIOS code). The Examiner cannot completely ignore 
the teachings of Thompson in concluding it would have been obvious to modify 
Thompson to include the missing claim limitations of claims 4, 8 and 12.' Further, 
what is the rational connection between authorizing execution of micro-code to 
ensure the integrity of the stored data or the programmable micro-code (BIOS code) 
and the missing claim limitations of claims 4, 8 and 12? 

Further, why would the reason to modify Thompson (whose purpose is to 
provide a security mechanism in a portable computer for thwarting theft or 
imauthorized access while making it easy to deal with lost passwords and validation 
of the device by some authority) to include the missing claim limitations of claims 4, 
8 and 12 be to provide ease in updating the flash PROM with new micro-code 
without compromising security? Thompson is not concerned with providing ease in 
updating the flash PROM with new micro-code without compromising security. The 
Examiner cannot completely ignore the teachings of Thompson in concluding it 
would have been obvious to modify Thompson to include the missing claim 
limitations of claims 4, 8 and 12. Further, what is the rational connection between 
providing ease in updating the flash PROM with new micro-code without 
compromising security and the missing claim limitations of claims 4, 8 and 12? 



Applicants respectfully request Examina Tran to respond to the following example. For example, 
suppose that the invoition of a super soaker gun (essentially a plastic gun that shoots watQ-) was never 
developed and an Apphcant filed for a patmt application on the super soaker gun. Apphcant claims a 
plastic gun with a container of watQ- that shoots water. The Examine- cites a primary reference that 
teaches a plastic gun that shoots darts and cites a secondary refaroice that teaches a plastic toy that 
contains a container of water. Since the primary reference does not teach a container filled with water, 
the Examina- cites the secondary refo-Qice as teaching this missing claim hmitation. The secondary 
referaice specifically states that the purpose of the container is to carry watQ-. The Examina then 
concludes that it would have been obvious to modify the primary reference with the secondary 
refermce in orda to cany water. The Examina believes that he/she has established a prima facie case 
of obviousness since the Examina has found a reason to have a containa of water. However, the 
Ex amin a is completely ignoring the teaching of the primary refaence. Why would one skilled in the 
art modify a plastic gun that shoots darts to have a container of wata? This is the key question to 
answa. While having a containa of wata may be used to carry wata, that is irrelevant as far as the 
purpose of the primary refaence. Simply citing to a passage in the secondary refaaice that discusses 
the purpose of that secondary refaence may not be sufficient evidence for an obviousness rejection. 
Afta dl, surely thae is a reason as to why the secondary refaence teaches the missing claim 
limitation or else why would the Examina include it? The Examina must explain ttie connection 
between the teachings of the primary refaence and the rationale of the secondary refaence for 
including the missing claim limitation. Otherwise, everything can be deemed obvious and virtually 
nothing can be patented. 
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Hence, the Examiner's motivation does not provide reasons that the skilled 
artisan, confronted with the same problems as the inventor and with no knowledge of 
the claimed invention, would modify Thompson to include the missing claim 
limitations of claims 4, 8 and 12. Accordingly, the Examiner has not presented a 
prima facie case of obviousness for rejecting claims 4, 8 and 12. In re Rouffet, 47 
U.S.P.Q.2d 1453, 1458 (Fed. Cir. 1998). 
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IV. CONCLUSION: 

As a result of the foregoing, it is asserted by Applicants that claims 1-12 in the 
Application are in condition for allowance, and Applicants respectfully request an 
allowance of such claims. Applicants respectfully request that the Examiner call 
Applicants' attorney at the below listed number if the Examiner beheves that such a 
discussion would be helpful in resolving any remaining issues. 



Respectfully submitted, 



WINSTEAD P.C. 



Attorneys 



By:_ 




P.O. Box 50784 
Dallas, TX 75201 
(512) 370-2832 



Austm_l 467548V. 1 
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